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Please amend the claims to read as indicated in the following list of 
claims: 

1. [Currently Amended] A method of regulating access to 
at least one service provided by at least one service 
provider, wherein a service authoriser: 

generates for each of multiple service time periods a 
different respective data set comprising private data and 
related public data; and 

after determining that determines whether a party is 
entitled to receive a said service for a particular one of 
said time periods. a**d, if so, provides that party with a 
decryption key for accessing the service during said 
particular one of said time periods., the decryption key 
being generated by the authoriser in dependence on both an 
arbitrary encryption key string associated with the 
service, and the private data of the data set for said 
particular one of said time periods.. 

2. [Currently amended] A method according to claim 1, 
wherein a said service provider provides said party with 
encrypted data which the party is required to decrypt to 
receive the service for a current said time period, the 
encrypted data being data encrypted based on said 
encryption key string and the public data of the data set 
for said current time period, and the party only being able 
to decrypt the encrypted data using said decryption key 
provided by the authoriser where the said particular one of 
said time periods is said current time period. 
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3. [Original] A method according to claim 2, wherein the 
data that is encrypted by the service provider is arbitrary 
data, said party being required to decrypt and return this 
data as evidence of its entitlement to receive the service 
for the current time period before the service provider 
provides said service to the party. 

4. [Original] A method according to claim 2, wherein the 
data that is encrypted by the service provider is a data 
component of the service. 

5. [Original] A method according to claim 4, wherein the 
data component comprises at least one of software and 
digital media content. 

6. [Original] A method according to claim 1, wherein the 
encryption key string is formed using at least an 
identifier of said service. 

7. [Currently amended] A method according to claim 6, 
wherein the service identifier is generated by said party 
and provided by it both to the authoriser to obtain the 
decryption key for enabling the party to receive the 
service during said particular one of said time periods., 
and to the service provider concerned. 

8. [Original] A method according to claim 7, wherein the 
service provider maps the service identifier to the most 
suitable one of multiple services it can provide in order 
to determine the service required by said party. 
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9. [Original] A method according to claim 6, wherein the 
service identifier is generated by one of the authoriser 
and the service provider concerned and made available both 
to the other of the service provider and authoriser, and to 
said party. 

10. [Original] A method according to claim 1, wherein 
plural said data sets are generated in advance of the time 
periods to .which they relate and the public data of these 
data sets are made available in advance of those time 
periods to at least one of said party and said at least one 
service provider. 

11. [Original] A method according to claim 1, wherein the 
time for which said service is available is divided into 
time slots, each said time period for which a respective 
said data set is generated corresponding to a respective 
one of said time slots. 

12. [Original] A method according to claim 1, wherein the 
time for which said service is available is divided into 
time slots, at least one of said time periods for which a 
respective said data set is generated corresponding to a 
combination of multiple said time slots. 

13. [Original] A method according to claim 1, wherein the 
time for which said service is available is divided into 
time slots, and wherein for a group of successive time 
slots, each time slot and each of every possible time- 
ordered combination of at least two adjacent time slots 
constitutes a respective said time period for which a 
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corresponding data set is generated by the authoriser, the 
authoriser providing a single decryption key to said party 
upon determining that the party is entitled to receive said 
service for any time slot or time-ordered combination of 
time slots within said group. 

14. [Original] A method according to claim 1, wherein at 
least one of the start and finish of a said time period is 
determined by the occurrence of a non-clock event. 

15. [Original] A method according to claim 1, wherein the 
decryption key provided to said party in respect of a time 
period for which it is entitled to receive said service, is 
securely stored in trusted platform equipment of said party 
such that the decryption key is not accessible in cleartext 
form to the party but is usable to decrypt said encrypted 
data in the trusted platform. 

16. [Original] A method according to claim 1, wherein the 
authoriser operates to determine the entitlement of said 
party to any of multiple services for any of said multiple 
time periods, and to provide the party with at least one 
decryption key appropriate for the or each service and the 
or each time period for which the party has been determined 
as entitled, the decryption keys for each of said multiple 
services in the same time period being different from each 
other . 

17. [Original] A method according to claim 16, wherein the 
authoriser uses the private data of the same data set for 
each service during the same time period when generating 
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the decryption key to be provided to said party, the 
encryption key strings used for each of said multiple 
services being different from each other. 

18. [Original] A method according to claim 16, wherein the 
authoriser generates a respective data set for each 
combination of service and time period, the authoriser 
using the private data of the data set for the appropriate 
service and time period when generating the decryption key 
to be provided to said party. 

19. [Currently amended] A computing entity for regulating 
access to at least one service provided by at least one 
service provider, the computing entity comprising: 

first means for generating for each of multiple 
service time periods a different respective data set 
comprising private data and related public data; 

second means for determining whether a party is 
entitled to receive a said service for a particular one of 
said time periods.; 

third means for providing a party that the second 
means has determined is entitled to receive the service, 
with a decryption key for accessing the service during said 
particular one of said time periods., the third means 
including key-generating means for generating the 
decryption key in dependence on both an arbitrary 
encryption key string associated with the service, and the 
private data of the data set for said particular one of 
said time periods.. 
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20. [Original] A computing entity according to claim 19, 
wherein the encryption key string is formed using at least 
an identifier of said service. 

21. [Original] A computing entity according to claim 20, 
wherein the computing entity is arranged to receive said 
service identifier from said party. 

22. [Original] A computing entity according to claim 20, 
wherein the computing entity is arranged to generate the 
service identifier and to make it available to the service 
provider concerned and said party. 

23. [Original] A computing entity according to claim 19, 
wherein the computing entity is arranged to use said first 
means to generate plural said data sets in advance of the 
time periods to which they relate, the computing entity 
being further arranged to make the public data of these 
data sets available in advance of those time periods to at 
least one of said party and the service provider concerned. 

24. [Original] A computing entity according to claim 19, 
wherein the time for which said service is available is 
divided into time slots, each said time period for which a 
respective said data set is arranged to be generated by 
said first means corresponding to a respective one of said 
time slots. 



25. [Original] A computing entity according to claim 19, 
wherein the time for which said service is available is 
divided into time slots, at least one of said time periods 
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for which a respective said data set is arranged to be 
generated by said first means corresponding to a 
combination of multiple said time slots. 

26. [Original] A computing entity according to claim 19, 
wherein the time for which said service is available is 
divided into time slots, and wherein for a group of 
successive time slots, each time slot and each of every 
possible time-ordered combination of at least two adjacent 
time slots constitutes a respective said time period for 
which- said first means is arranged to generate a 
corresponding data set, the third means being arranged to 
provide a single decryption key to said party upon the 
second means determining that the party is entitled to 
receive said service for any time slot or time-ordered 
combination of time slots within said group. 

27. [Original] A computing entity according to claim 19, 
wherein the first means includes means for determining the 
occurrence of a non-clock event and for using this 
occurrence to start or finish of a said time period. 

28. [Original] A computing entity according to claim 19, 
wherein the second means is arranged to determine the 
entitlement of said party to any of multiple services for 
any of said multiple time periods, the third means being 
arranged to provide said party with at least one decryption 
key appropriate for the or each service and the or each 
time period for which the party has been determined as 
entitled, the decryption keys for each of said multiple 
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services in the same time period being different from each 
other . 



29. [Original] A computing entity according to claim 28, 
wherein the key-generating means is arranged to use the 
private data of same data set for each service during the 
same time period when generating the decryption key to be 
provided to said party, the encryption key strings used for 
each of said multiple services being different from each 
other . 

30. [Original] A computing entity according to claim 28, 
wherein the first means is arranged to generate a 
respective data set for each combination of service and 
time period, the key-generating means being arranged to use 
the private data of the data set for the appropriate 
service and time period when generating the decryption key 
to be provided to said party. 



Claims 31-47. Cancelled. 



